Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
File: MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft (raw, json)
Hash identifier: OewBXvXv3wg2cUwlrreLMqhr/kKVOLHdD1HmOoMrsts=
Subject key identifier: EF:52:77:3C:23:79:B5:3C:20:09:BE:1F:E8:DD:7F:BB:7E:AD:FE:7C
Authority key identifier: 31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
Certificate issuer: /CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Certificate serial: 0194BB605BC51EE90B1C7EEC5E2F32CF9D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
Manifest number: 0C29
Signing time: Fri 31 Jan 2025 08:00:41 +0000
Manifest this update: Fri 31 Jan 2025 08:00:41 +0000
Manifest next update: Sat 01 Feb 2025 08:00:41 +0000
Files and hashes: 1: MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl (hash: iOWb+9J7N2kHwT12BGpymdDOG8HMYajNLcWuUAwVEcE=)
2: QXjAwQSpvYGLG9EKG43DcrvrWjg.roa (hash: /g3NGPvML9niLWrxGUEsCrw0JcuhbxCMPrgB31IKq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:60:5b:c5:1e:e9:0b:1c:7e:ec:5e:2f:32:cf:9d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310e2e9fb70668c796adce877b21e09a8a1ad029
Validity
Not Before: Jan 31 08:00:41 2025 GMT
Not After : Feb 1 08:00:41 2025 GMT
Subject: CN=ef52773c2379b53c2009be1fe8dd7fbb7eadfe7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:20:2a:2d:ff:45:bc:ce:27:93:60:65:7e:f6:
d3:50:d1:cc:b2:48:5d:21:9d:bd:81:10:c6:ca:63:
50:22:9e:5f:86:ea:b8:38:65:5a:01:a7:a3:23:bd:
00:4c:a0:14:42:84:54:31:02:e2:b0:53:de:c6:37:
fb:89:35:87:70:cc:f3:db:b1:30:96:79:6e:36:66:
4b:eb:72:26:44:9a:87:2f:61:24:2c:4e:c6:65:85:
3a:f9:61:53:c8:82:d7:2b:cb:1a:75:55:89:8b:71:
0a:6b:ca:72:b4:a3:f4:93:ca:7a:74:ae:f8:02:b0:
6c:56:83:b1:1c:64:e6:27:b1:fd:df:6d:a2:b9:4f:
c6:fa:05:32:10:b1:33:b1:b9:90:51:3f:d5:6b:43:
c6:1a:4c:dc:65:a5:27:0a:1e:0c:af:a9:43:3c:a6:
21:6a:06:12:c1:ca:66:e4:98:5a:c5:5e:f0:99:39:
54:c9:68:fc:da:3b:e0:13:2a:a0:32:12:e9:52:b1:
f2:81:fd:f0:61:c8:a3:ab:55:da:fc:a8:f1:7a:0c:
28:09:31:48:30:96:dd:7b:d9:c8:35:23:fd:e1:e9:
a2:74:38:33:62:50:da:37:da:b1:d2:ad:ea:6e:9f:
07:75:9a:53:c2:b0:13:7a:62:09:a7:bd:1e:21:15:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:52:77:3C:23:79:B5:3C:20:09:BE:1F:E8:DD:7F:BB:7E:AD:FE:7C
X509v3 Authority Key Identifier:
keyid:31:0E:2E:9F:B7:06:68:C7:96:AD:CE:87:7B:21:E0:9A:8A:1A:D0:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQ4un7cGaMeWrc6HeyHgmooa0Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d9d82d-1ca4-4824-a92c-ca55efc7752d/1/MQ4un7cGaMeWrc6HeyHgmooa0Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:94:d3:f6:64:a9:65:c3:3d:8e:24:dd:a1:d1:f5:ab:cc:3d:
0c:90:4a:c9:3a:12:dd:4f:46:8d:cb:f8:44:86:e0:f2:94:47:
d4:f0:e9:99:1b:bd:eb:b6:b5:04:e5:18:6d:1d:74:e1:83:f7:
c3:01:59:3d:2f:a6:e9:81:3f:24:90:d5:c4:c5:69:93:cf:9d:
a1:e9:50:ba:c1:3c:be:fa:69:5b:5f:08:ef:25:71:8d:c0:55:
1f:87:cb:85:a4:27:1b:ae:fe:d6:42:3f:b1:1f:52:e9:29:7b:
98:3c:b5:fe:b9:28:c2:b1:20:1b:10:4d:a3:66:ba:51:24:d2:
2d:85:51:b5:54:21:57:8a:51:f0:31:e1:a8:14:41:7b:98:ed:
6d:6a:85:1c:4e:0e:e9:6c:75:53:79:40:e5:9b:92:6e:0d:90:
27:c3:4b:97:af:ef:da:99:69:38:75:4c:53:31:ad:82:0f:d8:
95:31:1b:22:c8:2c:75:fd:d1:14:ac:58:95:66:b0:30:82:60:
37:02:ea:ab:79:95:e6:de:ff:ad:b8:b2:c3:52:82:58:fb:f9:
f2:32:ed:85:7c:e1:b7:e6:7b:38:0f:1c:a6:a7:99:ea:91:d7:
a3:f7:5f:11:ed:9d:71:d6:ce:73:78:58:8e:b2:41:c9:9e:b2:
2a:25:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 31 15:37:54 2025 by rpki-client on console-fra.rpki-client.org